PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-1839 Intrado CVE debrief

CVE-2024-1839 is a critical unauthenticated blind time-based SQL injection vulnerability in the Intrado 911 Emergency Gateway (EGW) login form, published by CISA on June 11, 2024. The vulnerability carries a CVSS 3.1 score of 10.0 (Critical), reflecting network attackability with no privileges required, no user interaction, and scope change, with high impacts to confidentiality, integrity, and availability. The blind time-based SQL injection vector allows unauthenticated attackers to execute malicious code, exfiltrate data, or manipulate the database through the login form. Intrado has released a patch requiring upgrade to the 5.5/5.6 branch; organizations must contact Intrado technical support for assistance. Immediate patching is essential given the critical severity and unauthenticated attack vector affecting emergency communications infrastructure.

Vendor
Intrado
Product
911 Emergency Gateway (EGW)
CVSS
CRITICAL 10
CISA KEV
Not listed in stored evidence
Original CVE published
2024-06-11
Original CVE updated
2024-06-11
Advisory published
2024-06-11
Advisory updated
2024-06-11

Who should care

Organizations operating Intrado 911 Emergency Gateway systems, particularly public safety answering points (PSAPs), emergency communications centers, and critical infrastructure operators relying on E-911 services. Network defenders, ICS security teams, and emergency communications administrators should prioritize this vulnerability due to potential impact on life-safety systems.

Technical summary

The Intrado 911 Emergency Gateway login form contains an unauthenticated blind time-based SQL injection vulnerability. Attackers can inject malicious SQL payloads through the login form without authentication, leveraging time-delay techniques to infer database structure and content. Successful exploitation enables arbitrary code execution, data exfiltration, and database manipulation. The vulnerability is remotely exploitable with low attack complexity, requiring no privileges or user interaction.

Defensive priority

critical

Recommended defensive actions

  • Contact Intrado technical support at 1-888-908-4167 or [email protected] to obtain the security patch for CVE-2024-1839
  • Upgrade all Intrado 911 Emergency Gateway deployments to the 5.5/5.6 branch to enable patch application
  • Prioritize patching of internet-facing or externally accessible EGW instances due to unauthenticated network attack vector
  • Implement network segmentation to restrict EGW administrative interfaces to authorized management networks only
  • Monitor authentication logs and database query patterns for anomalous time-delay indicators consistent with blind time-based SQL injection attempts
  • Apply CISA ICS recommended practices for defense-in-depth strategies for industrial control systems
  • Review and validate input sanitization on all authentication forms as a compensating control during patch deployment windows

Evidence notes

Vulnerability details sourced from CISA CSAF advisory ICSA-24-163-04. CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Remediation requires upgrade to 5.5/5.6 branch and patch application via vendor support channels.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-1839 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-1839

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-1839 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-1839

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-163-04.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-advisories/icsa-24-163-04

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.